Peoplesoft Enterprise Cc Common Application Objects
Monthly
Full takeover of PeopleSoft Enterprise CC Common Application Objects version 9.2 is achievable by an unauthenticated remote attacker via the Oracle Net protocol. Despite the high-severity classification (CVSS 8.1), the attack complexity is rated High, meaning specific technical conditions must be satisfied for exploitation to succeed. No public exploit code exists at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, but the full C:H/I:H/A:H impact (confidentiality, integrity, and availability) makes this a meaningful risk for organizations running PeopleSoft 9.2 in network-accessible configurations.
Cross-context data compromise in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 (Common Application Objects component) allows a low-privileged, network-based attacker to gain unauthorized read and write access to critical data after tricking a legitimate user into interacting with malicious content. The scope-changing nature (S:C) combined with the Authentication Bypass tag and required user interaction is consistent with a stored cross-site scripting or session-riding style flaw whose impact spills over into additional PeopleSoft products. No public exploit identified at time of analysis and the flaw is not on CISA KEV.
Unauthorized data compromise in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 allows a remote, unauthenticated attacker to read, create, modify, or delete critical application data over HTTP. The flaw is tagged as an authentication bypass and carries a CVSS 3.1 base score of 9.1 (high confidentiality and integrity impact, no availability impact), making it easily exploitable without user interaction. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and lack of authentication make it a high-priority patching target.
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Page and Field Configuration). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Full takeover of PeopleSoft Enterprise CC Common Application Objects version 9.2 is achievable by an unauthenticated remote attacker via the Oracle Net protocol. Despite the high-severity classification (CVSS 8.1), the attack complexity is rated High, meaning specific technical conditions must be satisfied for exploitation to succeed. No public exploit code exists at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, but the full C:H/I:H/A:H impact (confidentiality, integrity, and availability) makes this a meaningful risk for organizations running PeopleSoft 9.2 in network-accessible configurations.
Cross-context data compromise in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 (Common Application Objects component) allows a low-privileged, network-based attacker to gain unauthorized read and write access to critical data after tricking a legitimate user into interacting with malicious content. The scope-changing nature (S:C) combined with the Authentication Bypass tag and required user interaction is consistent with a stored cross-site scripting or session-riding style flaw whose impact spills over into additional PeopleSoft products. No public exploit identified at time of analysis and the flaw is not on CISA KEV.
Unauthorized data compromise in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 allows a remote, unauthenticated attacker to read, create, modify, or delete critical application data over HTTP. The flaw is tagged as an authentication bypass and carries a CVSS 3.1 base score of 9.1 (high confidentiality and integrity impact, no availability impact), making it easily exploitable without user interaction. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and lack of authentication make it a high-priority patching target.
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Page and Field Configuration). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Run Control Management). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.